Edge-Core ECS4810-12M Layer 2 Programming manual

Management Guide
www.edge-core.com
ECS4810-12M Layer 2
Gigabit Ethernet Switch

M ANAGEMENT G UIDE
ECS4810-12M GIGABIT ETHERNET SWITCH
Layer 2 Switch
with 12 Gigabit Combination Ports (RJ-45/SFP)
ECS4810-12M
E042014/ST-R04
149100000142A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.

A BOUT T HIS G UIDE
– 6 –
REVISION HISTORY This section summarizes the changes in each revision of this guide.
APRIL 2014 REVISION
This is the fourth version of this guide. This guide is valid for software
release v1.1.4.11. It includes information on the following changes:
◆Updated parameters for "Copying Files via FTP/TFTP or HTTP" on
page 127.
◆Updated parameters for "Setting the Time Manually" on page 135.
◆Updated parameters for "Setting the Time Zone" on page 138.
◆Updated parameters for "Configuring Telnet Settings" on page 141.
◆Updated parameters for "Configuring Transceiver Thresholds" on
page 170.
◆Updated parameters for "Creating QoS Policies" on page 294.
◆Updated parameters for "Configuring an Extended IPv6 ACL" on
page 368.
◆Updated parameters for "Configuring a MAC ACL" on page 370.
◆Updated Command Usage section for "Configuring Port Security" on
page 388.
◆Updated parameters for "Configuring LLDP Interface Attributes" on
page 425.
◆Updated parameters for "Setting SNMPv3 Views" on page 450.
◆Updated parameters for Table 31, "Supported Notification Messages,"
on page 454.
◆Updated parameters for "Specifying Static Interfaces for a Multicast
Router" on page 604.
◆Added the commands "clock summer-time (date)" on page 739, "clock
summer-time (predefined)" on page 741, and "clock summer-time
(recurring)" on page 742.
◆Added the chapter "Loopback Detection Commands" on page 1021.
◆Added the command "mvr6 priority" on page 1256.
◆Updated Command Usage section for the command "ip dhcp client
class-id" on page 1362.

A BOUT T HIS G UIDE
– 7 –
FEBRUARY 2014 REVISION
This is the third version of this guide. This guide is valid for software
release v1.1.4.9. It includes information on the following changes:
◆Corrected description of the command "spanning-tree bpdu-filter" on
page 1051.
DECEMBER 2013 REVISION
This is the second version of this guide. This guide is valid for software
release v1.1.4.8. It includes information on the following changes:
◆Updated Parameter section for "Displaying Statistical History" on
page 165.
◆Added section for "Displaying Transceiver Data" on page 169 and
"Configuring Transceiver Thresholds" on page 170.
◆Added description of Timeout Mode and additional information for Port
Priority under "Configuring a Dynamic Trunk" on page 178.
◆Added description of Port Priority under "Mapping Protocol Groups to
Interfaces" on page 223.
◆Added section for "Configuring VLAN Translation" on page 231.
◆Added description for the parameters Action and Shutdown Interval
under "Configuring Loopback Detection" on page 244.
◆Added description of Priority parameter and bundle parameters under
"Creating QoS Policies" on page 294.
◆Added description of Counter parameter under "Binding a Port to an
Access Control List" on page 374.
◆Added the section "Configuring ACL Mirroring" on page 375, and
"Showing ACL Hardware Counters" on page 377.
◆Added description of MAC Filter and MAC Filter ID parameters under
"Configuring Port Security" on page 388.
◆Added description of DHCP Snooping Information Option Sub-option
Format and DHCP Snooping Information Option Remote ID parameters
under "DHCP Snooping Configuration" on page 410.
◆Added description of Circuit ID parameter under "Configuring Ports for
DHCP Snooping" on page 413.
◆Updated information in Parameter section under "Using the Ping
Function" on page 559.
◆Changed description of Restart DHCPv6 parameter under "Configuring
IPv6 Interface Settings" on page 568.

A BOUT T HIS G UIDE
– 8 –
◆Added description of RA Guard parameters under "Configuring IPv6
Interface Settings" on page 568.
◆Added the section "Configuring DHCP Relay Service" on page 592.
◆Added description of Type and Expire parameters under "Specifying
Static Interfaces for a Multicast Router" on page 604.
◆Updated description of parameters under "Displaying Multicast Groups
Discovered by IGMP Snooping" on page 614.
◆Added the section "Multicast VLAN Registration for IPv6" on page 641.
◆Added the commands "show alarm" on page 694 and "show alarm-
status" on page 695.
◆Added the commands "show watchdog" on page 702 and "watchdog
software" on page 702.
◆Modified syntax of the command "delete" on page 708.
◆Added the command "upgrade opcode reload" on page 713 and "show
upgrade" on page 713.
◆Added the section "TFTP Configuration Commands" on page 713.
◆Added the command "terminal" on page 724.
◆Updated syntax for "logging host" on page 728.
◆Added the section "Synchronous Ethernet" on page 748.
◆Added the command "memory" on page 784 and "process cpu" on
page 785.
◆Changed command set for "Flow Sampling Commands" on page 795.
◆Added the section "PPPoE Intermediate Agent" on page 854.
◆Added the command "ip dhcp snooping information option circuit-id" on
page 895 and "clear ip dhcp snooping binding" on page 897.
◆Added the command "dos-protection tcp-udp-port-zero" on page 916.
◆Removed “tos” parameter from the command "permit, deny (Extended
IPv4 ACL)" on page 928.
◆Added “counter” parameter to the commands "ip access-group" on
page 930, "ipv6 access-group" on page 936, and "mac access-group"
on page 941.
◆Added the command "clear access-list hardware counters" on
page 946.

A BOUT T HIS G UIDE
– 9 –
◆Added the parameter “hardware counters” to the command "show
access-list" on page 947.
◆Added the commands "discard" on page 953 and "show discard" on
page 959.
◆Added the command "transceiver-monitor" on page 967.
◆Updated description of commands "transceiver-threshold current" on
page 968, "transceiver-threshold rx-power" on page 969, "transceiver-
threshold temperature" on page 970, "transceiver-threshold tx-power"
on page 971, and "transceiver-threshold voltage" on page 972.
◆Added the command "show interfaces transceiver-threshold" on
page 974.
◆Added the command "lacp timeout" on page 987.
◆Added “access-list” parameter, and information about how to use this
parameter in the Command Usage section, for the command "port
monitor" on page 993.
◆Added parameters “brief” and “stp-enabled-only” for the command
"show spanning-tree" on page 1064.
◆Updated syntax for the command "erps domain" on page 1069.
◆Added commands for ERPS version 2, including "mep-monitor" on
page 1074, "non-revertive" on page 1077, "raps-def-mac" on
page 1082, "raps-without-vc" on page 1082, "rpl neighbor" on
page 1085, "version" on page 1087, "erps clear" on page 1089, "erps
forced-switch" on page 1089, and "erps manual-switch" on page 1091.
◆Added the command "non-erps-dev-protect" on page 1076.
◆Added “port-channel” parameter for the command "ring-port" on
page 1084
◆Added the command "clear erps statistics" on page 1088.
◆Added “statistics” parameter for the command "show erps" on
page 1093.
◆Updated syntax for "switchport dot1q-tunnel service match cvid" on
page 1117.
◆Added the section "Configuring VLAN Translation" on page 1125.
◆Added “priority” parameter to the command "protocol-vlan
protocol-group (Configuring Interfaces)" on page 1129.
◆Added “ipv6 dscp” parameter to the command "match" on page 1160.

A BOUT T HIS G UIDE
– 10 –
◆Added the commands "bundle" on page 1163 and "priority" on
page 1171.
◆Added the command "clear ip igmp snooping statistics" on page 1195.
◆Added the commands "ip igmp authentication" on page 1204, "ip igmp
query-drop" on page 1208, "ip multicast-data-drop" on page 1208,
"show ip igmp authentication" on page 1209, "show ip igmp
query-drop" on page 1211, and "show ip multicast-data-drop" on
page 1212.
◆Added the sections "MLD Snooping" on page 1213 and "MLD Filtering
and Throttling" on page 1223.
◆Added the commands "mvr" on page 1233, "mvr proxy-query-interval"
on page 1236, "mvr source-port-mode dynamic" on page 1239, "clear
mrv groups dynamic" on page 1244, and "clear mrv statistics" on
page 1244.
◆Added parameters “query,” “summary,” and “mvr-vlan” to the
command "show mvr statistics" on page 1249.
◆Added the commands "mvr6 proxy-query-interval" on page 1258,
"mvr6 source-port-mode dynamic" on page 1260, "clear mvr6 groups
dynamic" on page 1265, and "clear mvr6 statistics" on page 1266.
◆Updated options for “interval” parameter for the command "ethernet
cfm cc ma interval" on page 1317.
◆Added “pattern” and “priority” parameters to the command "ethernet
cfm loopback" on page 1331.
◆Added the command "clear efm oam event-log" on page 1344.
◆Added the command "ipv6 dhcp client rapid-commit vlan" on
page 1364.
◆Updated Command Usage section for the command "ipv6 dhcp restart
client vlan" on page 1364.
◆Added the section "DHCP Relay Option 82" on page 1367.
◆Updated description of “netmask” parameter for the command "ip
address" on page 1374.
◆Added the command "traceroute6" on page 1402.
◆Added the command "ipv6 nd raguard" on page 1405 and "show ipv6
nd raguard" on page 1407.
◆Added the section "ND Snooping" on page 1409.

A BOUT T HIS G UIDE
– 11 –
JUNE 2011 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.6.0.

A BOUT T HIS G UIDE
– 12 –

– 13 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 13
FIGURES 51
TABLES 63
SECTION I GETTING STARTED 69
1INTRODUCTION 71
Key Features 71
Description of Software Features 72
System Defaults 77
2INITIAL SWITCH CONFIGURATION 81
Connecting to the Switch 81
Configuration Options 81
Required Connections 82
Remote Connections 83
Basic Configuration 84
Console Connection 84
Setting Passwords 84
Setting an IP Address 85
Downloading a Configuration File Referenced by a DHCP Server 91
Enabling SNMP Management Access 93
Managing System Files 95
Saving or Restoring Configuration Settings 96
SECTION II WEB CONFIGURATION 99
3USING THE WEB INTERFACE 101
Connecting to the Web Interface 101

C ONTENTS
– 14 –
Navigating the Web Browser Interface 102
Home Page 102
Configuration Options 103
Panel Display 103
Main Menu 104
4BASIC MANAGEMENT TASKS 121
Displaying System Information 121
Displaying Hardware/Software Versions 123
Configuring Support for Jumbo Frames 124
Displaying Bridge Extension Capabilities 125
Managing System Files 127
Copying Files via FTP/TFTP or HTTP 127
Saving the Running Configuration to a Local File 129
Setting the Start-Up File 130
Showing System Files 131
Automatic Operation Code Upgrade 131
Setting the System Clock 135
Setting the Time Manually 135
Setting the SNTP Polling Interval 137
Specifying SNTP Time Servers 138
Setting the Time Zone 138
Configuring the Console Port 139
Configuring Telnet Settings 141
Displaying CPU Utilization 143
Displaying Memory Utilization 144
Resetting the System 145
5INTERFACE CONFIGURATION 149
Port Configuration 150
Configuring by Port List 150
Configuring by Port Range 152
Displaying Connection Status 153
Configuring Local Port Mirroring 154
Configuring Remote Port Mirroring 156
Showing Port or Trunk Statistics 160
Displaying Statistical History 165
Displaying Transceiver Data 169

C ONTENTS
– 15 –
Configuring Transceiver Thresholds 170
Performing Cable Diagnostics 172
Trunk Configuration 174
Configuring a Static Trunk 175
Configuring a Dynamic Trunk 178
Displaying LACP Port Counters 184
Displaying LACP Settings and Status for the Local Side 185
Displaying LACP Settings and Status for the Remote Side 187
Configuring Load Balancing 188
Saving Power 190
Traffic Segmentation 192
Enabling Traffic Segmentation 192
Configuring Uplink and Downlink Ports 193
VLAN Trunking 195
6 VLAN CONFIGURATION 199
IEEE 802.1Q VLANs 199
Configuring VLAN Groups 202
Adding Static Members to VLANs 204
Configuring Dynamic VLAN Registration 209
Showing VLAN Statistics 212
IEEE 802.1Q Tunneling 213
Enabling QinQ Tunneling on the Switch 217
Creating CVLAN to SPVLAN Mapping Entries 218
Adding an Interface to a QinQ Tunnel 220
Protocol VLANs 221
Configuring Protocol VLAN Groups 222
Mapping Protocol Groups to Interfaces 223
Configuring IP Subnet VLANs 225
Configuring MAC-based VLANs 227
Configuring VLAN Mirroring 229
Configuring VLAN Translation 231
7ADDRESS TABLE SETTINGS 233
Setting Static Addresses 233
Changing the Aging Time 235
Displaying the Dynamic Address Table 236
Clearing the Dynamic Address Table 237

C ONTENTS
– 16 –
Configuring MAC Address Mirroring 238
8SPANNING TREE ALGORITHM 241
Overview 241
Configuring Loopback Detection 244
Configuring Global Settings for STA 246
Displaying Global Settings for STA 251
Configuring Interface Settings for STA 252
Displaying Interface Settings for STA 256
Configuring Multiple Spanning Trees 259
Configuring Interface Settings for MSTP 263
9CONGESTION CONTROL 265
Rate Limiting 265
Storm Control 266
Automatic Traffic Control 268
Setting the ATC Timers 270
Configuring ATC Thresholds and Responses 271
10 CLASS OF SERVICE 275
Layer 2 Queue Settings 275
Setting the Default Priority for Interfaces 275
Selecting the Queue Mode 276
Mapping CoS Values to Egress Queues 279
Layer 3/4 Priority Settings 281
Setting Priority Processing to DSCP or CoS 282
Mapping Ingress DSCP Values to Internal DSCP Values 283
Mapping CoS Priorities to Internal DSCP Values 285
11 QUALITY OF SERVICE 289
Overview 289
Configuring a Class Map 290
Creating QoS Policies 294
Attaching a Policy Map to a Port 305
12 VOIP TRAFFIC CONFIGURATION 307
Overview 307
Configuring VoIP Traffic 307
Configuring Telephony OUI 309
Configuring VoIP Traffic Ports 310

C ONTENTS
– 17 –
13 SECURITY MEASURES 313
AAA Authentication, Authorization and Accounting 314
Configuring Local/Remote Logon Authentication 315
Configuring Remote Logon Authentication Servers 316
Configuring AAA Accounting 321
Configuring AAA Authorization 326
Configuring User Accounts 329
Web Authentication 331
Configuring Global Settings for Web Authentication 332
Configuring Interface Settings for Web Authentication 333
Network Access (MAC Address Authentication) 334
Configuring Global Settings for Network Access 337
Configuring Network Access for Ports 338
Configuring Port Link Detection 340
Configuring a MAC Address Filter 341
Displaying Secure MAC Address Information 343
Configuring HTTPS 344
Configuring Global Settings for HTTPS 344
Replacing the Default Secure-site Certificate 346
Configuring the Secure Shell 348
Configuring the SSH Server 350
Generating the Host Key Pair 352
Importing User Public Keys 353
Access Control Lists 355
Setting a Time Range 357
Showing TCAM Utilization 360
Setting the ACL Name and Type 361
Configuring a Standard IPv4 ACL 363
Configuring an Extended IPv4 ACL 364
Configuring a Standard IPv6 ACL 366
Configuring an Extended IPv6 ACL 368
Configuring a MAC ACL 370
Configuring an ARP ACL 372
Binding a Port to an Access Control List 374
Configuring ACL Mirroring 375
Showing ACL Hardware Counters 377

C ONTENTS
– 18 –
ARP Inspection 378
Configuring Global Settings for ARP Inspection 379
Configuring VLAN Settings for ARP Inspection 381
Configuring Interface Settings for ARP Inspection 383
Displaying ARP Inspection Statistics 384
Displaying the ARP Inspection Log 385
Filtering IP Addresses for Management Access 386
Configuring Port Security 388
Configuring 802.1X Port Authentication 390
Configuring 802.1X Global Settings 392
Configuring Port Authenticator Settings for 802.1X 393
Configuring Port Supplicant Settings for 802.1X 397
Displaying 802.1X Statistics 399
IP Source Guard 402
Configuring Ports for IP Source Guard 402
Configuring Static Bindings for IP Source Guard 404
Displaying Information for Dynamic IP Source Guard Bindings 407
DHCP Snooping 408
DHCP Snooping Configuration 410
DHCP Snooping VLAN Configuration 412
Configuring Ports for DHCP Snooping 413
Displaying DHCP Snooping Binding Information 414
14 BASIC ADMINISTRATION PROTOCOLS 417
Configuring Event Logging 417
System Log Configuration 417
Remote Log Configuration 420
Sending Simple Mail Transfer Protocol Alerts 421
Link Layer Discovery Protocol 423
Setting LLDP Timing Attributes 423
Configuring LLDP Interface Attributes 425
Configuring LLDP Interface Civic-Address 429
Displaying LLDP Local Device Information 431
Displaying LLDP Remote Device Information 434
Displaying Device Statistics 443
Simple Network Management Protocol 445
Configuring Global Settings for SNMP 447

C ONTENTS
– 19 –
Setting the Local Engine ID 448
Specifying a Remote Engine ID 449
Setting SNMPv3 Views 450
Configuring SNMPv3 Groups 453
Setting Community Access Strings 458
Configuring Local SNMPv3 Users 459
Configuring Remote SNMPv3 Users 461
Specifying Trap Managers 464
Creating SNMP Notification Logs 468
Showing SNMP Statistics 470
Remote Monitoring 472
Configuring RMON Alarms 473
Configuring RMON Events 476
Configuring RMON History Samples 478
Configuring RMON Statistical Samples 481
Switch Clustering 483
Configuring General Settings for Clusters 484
Cluster Member Configuration 485
Managing Cluster Members 487
Ethernet Ring Protection Switching 488
ERPS Global Configuration 492
ERPS Ring Configuration 493
ERPS Forced and Manual Mode Operations 509
Connectivity Fault Management 513
Configuring Global Settings for CFM 516
Configuring Interfaces for CFM 520
Configuring CFM Maintenance Domains 520
Configuring CFM Maintenance Associations 525
Configuring Maintenance End Points 530
Configuring Remote Maintenance End Points 531
Transmitting Link Trace Messages 533
Transmitting Loop Back Messages 535
Transmitting Delay-Measure Requests 537
Displaying Local MEPs 539
Displaying Details for Local MEPs 540
Displaying Local MIPs 541

C ONTENTS
– 20 –
Displaying Remote MEPs 542
Displaying Details for Remote MEPs 543
Displaying the Link Trace Cache 545
Displaying Fault Notification Settings 547
Displaying Continuity Check Errors 548
OAM Configuration 550
Enabling OAM on Local Ports 550
Displaying Statistics for OAM Messages 552
Displaying the OAM Event Log 553
Displaying the Status of Remote Interfaces 554
Configuring a Remote Loop Back Test 555
Displaying Results of Remote Loop Back Testing 557
15 IP CONFIGURATION 559
Using the Ping Function 559
Address Resolution Protocol 561
Setting the ARP Timeout 561
Displaying ARP Entries 562
Setting the Switch’s IP Address (IP Version 4) 563
Configuring the IPv4 Default Gateway 563
Configuring IPv4 Interface Settings 564
Setting the Switch’s IP Address (IP Version 6) 567
Configuring the IPv6 Default Gateway 567
Configuring IPv6 Interface Settings 568
Configuring an IPv6 Address 573
Showing IPv6 Addresses 576
Showing the IPv6 Neighbor Cache 577
Showing IPv6 Statistics 579
Showing the MTU for Responding Destinations 584
16 IP SERVICES 585
Domain Name Service 585
Configuring General DNS Service Parameters 585
Configuring a List of Domain Names 586
Configuring a List of Name Servers 588
Configuring Static DNS Host to Address Entries 589
Displaying the DNS Cache 590